Abstract: Methods and apparatus detecting attempts to obtain IP addresses by faking a MAC address in a data portion of an IP address request message are described. In accordance with the present invention, rather than use standard address allocation protocols, e.g., ARP, the DNS DCHP contacts the requesting edge router via a private secure network. The MAC address received in the address request is compared to the MAC addresses stored in the edge routers port/MAC address resolution table. If the MAC address received in the request message cannot be found in the edge router's table which was created from the MAC address included in the message's header, a fraudulent attempt to obtain a MAC address is declared. The fraudulent attempt to obtain an IP address can be reported and steps taken to identify the perpetrator of the fraud.

Abstract: Simple peering is provided in a novel network in which transport technology is independent of network access technology. An out-of-band network may be used to carry advertisements to an update facility. The update facility may use layer 3 destination address information and at least a part of context information (to identify customers uniquely) to determine a layer 3 address of an edge device of the transport network associated with an addressed customer device. Virtual private networks are supported, as context information is used to distinguish different customers with overlapping layer 3 addresses.

Abstract: The invention relates to an enhanced ADSL Data Network (ADN) with vertical services capabilities. In general, vertical services capabilities are data services offered directly from a central office to an end user, without compromising the integrity of the user's guaranteed bit rate to the Internet through the ADN. One such vertical service is content downloadable at a high data rate from a content server located in or proximate to a central office that serves the end user. The content of the local server is updated and upgraded periodically and systematically from a central content server that distributes content to a number of remote central offices. The content is distributed between the central content server and the respective local content servers using available bandwidth, that is to say bandwidth on at least certain network links that is unused by subscriber traffic.

Abstract: Offering vertical services to subscribers and service providers is an avenue to immediately improve the competitiveness of digital subscriber line access service, for example of the type offered by a local exchange carrier. To deliver high-quality vertical services, however, the underlying ADSL Data Network (ADN) or the like needs to establish Quality of Service (QoS) as a core characteristic and offer an efficient mechanism for insertion of the vertical services. The inventive network architecture introduces QoS into the ADN, in a manner that enables the delivery of sophisticated and demanding IP-based services to subscribers, does not affect existing Internet tiers of service, and is cost-effective in terms of initial costs, build-out, and ongoing operations.

Abstract: Supporting virtual private networks by using a new layer 3 address to encapsulate a network-bound packet so that its context information, from which a layer 2 (e.g., MAC) address can be derived, is preserved. If this encapsulation was not done, the layer 2 address would change over each segment of the network. Thus, the encapsulation preserves the concept of group identification, using at least a part of the context, over the entire network and not just at the edge of the network. If a packet is received from the network (to be forwarded to a customer), the layer 3 address that was added in the encapsulation is stripped off. The original layer 3 destination address may be used with a client device addressing table to determine a new context information, and a layer 2 (e.g., MAC) address of a destination client device.

Abstract: Offering vertical services to subscribers and service providers is an avenue to immediately improve the competitiveness of digital subscriber line access service, for example of the type offered by a local exchange carrier. To deliver high-quality vertical services, however, the underlying ADSL Data Network (ADN) or the like needs to establish Quality of Service (QoS) as a core characteristic and offer an efficient mechanism for insertion of the vertical services. The inventive network architecture introduces QoS into the ADN, in a manner that enables the delivery of sophisticated and demanding IP-based services to subscribers, does not affect existing Internet tiers of service, and is cost-effective in terms of initial costs, build-out, and ongoing operations.

Abstract: Limiting or controlling access to various services thereby performing a firewall function. An access router may permit or deny a packet based on at least a portion of a unique bit string (or context information) which replaced layer 2 header information (e.g., the layer 2 (e.g., MAC) address). Further, a particular quality of service may be indicated by at least a part of the unique bit string (or context information). The service provided to a group of customers, that group of customers being defined by at least a portion of the unique bit string (or context information), may be monitored. Multicast groups may be supported by checking at least a part of the unique bit string (or context information) to determine whether or not a customer associated with that port is permitted to join the multicast group.

Abstract: A network architecture includes a switch that can examine and selectively forward packets or frames based on information encapsulated in layer-2 information in the protocol stack. The switch segregates upstream traffic by data type and aggregates downstream Internet traffic with traffic from a local vertical services domain. The network architecture provides an efficiency way to insert vertical services.

Abstract: Offering vertical services to subscribers and service providers is an avenue to immediately improve the competitiveness of digital subscriber line access service, for example of the type offered by a local exchange carrier. To deliver high-quality vertical services, however, the underlying ADSL Data Network (ADN) or the like needs to establish Quality of Service (QoS) as a core characteristic and offer an efficient mechanism for insertion of the vertical services. The inventive network architecture introduces QoS into the ADN, in a manner that enables the delivery of sophisticated and demanding IP-based services to subscribers, does not affect existing Internet tiers of service, and is cost-effective in terms of initial costs, build-out, and ongoing operations.

Abstract: Offering vertical services to subscribers and service providers is an avenue to immediately improve the competitiveness of digital subscriber line access service, for example of the type offered by a local exchange carrier. To deliver high-quality vertical services, however, the underlying ADSL Data Network (ADN) or the like needs to establish Quality of Service (QoS) as a core characteristic and offer an efficient mechanism for insertion of the vertical services. The inventive network architecture introduces QoS into the ADN, in a manner that enables the delivery of sophisticated and demanding IP-based services to subscribers, does not affect existing Internet tiers of service, and is cost-effective in terms of initial costs, build-out, and ongoing operations.

Abstract: Aggregating physical connections from customers for presentation to an access router and de-aggregating traffic from a shared link(s) from the access router. Ports of an aggregation unit may be configured such that each has a unique identifier in the place of information (e.g., the layer 2 address) originally in the layer 2 header. The layer 2 (e.g., MAC) address of the customer device connected with the port can be associated with, and therefore determined from, the IP address of the attached device. When a packet is received from a customer, information in the layer 2 header is changed to a unique identifier assigned to a logical port or interface associated with the physical port. When a packet is received from the access router, it is placed on the port assigned to the logical port associated with the destination layer 2 address (or associated with other bits of the unique bit string and at least some of those bits are replaced with the destination layer 2 address of the device associated with the port.

Abstract: Methods and apparatus for determining, in a reliable manner, a port, physical location and/or device identifier, such as a MAC address, associated with a device using an IP address and for using such information, e.g., to support one or more security applications is described. Supported security applications include restricting access to services based on the location of a device seeking access to a service, determining the location of stolen devices, and verifying the location of the source of a message or other IP signal, e.g., to determine if a prisoner is contacting a monitoring service from a predetermined location.

Abstract: Methods and apparatus detecting attempts to obtain IP addresses by faking a MAC address in a data portion of an IP address request message are described. In accordance with the present invention, rather than use standard address allocation protocols, e.g., ARP, the DNS DCHP contacts the requesting edge router via a private secure network. The MAC address received in the address request is compared to the MAC addresses stored in the edge routers port/MAC address resolution table. If the MAC address received in the request message cannot be found in the edge router's table which was created from the MAC address included in the message's header, a fraudulent attempt to obtain a MAC address is declared. The fraudulent attempt to obtain an IP address can be reported and steps taken to identify the perpetrator of the fraud.

Abstract: For purposes of servicing emergency calls, such as 911 calls, a telephone number is associated with each edge router port used to provide IP service to a customer premise location. A telephone number is associated with the edge router port and the corresponding customer location. The telephone number and location information are stored in a database used for providing emergency calling party location information. When a switch used for routing IP calls detects a telephone call to an emergency call center it determines the edge router port from which the call was placed and the telephone number associated with the port for emergency call purposes. The call is then forwarded to the emergency call service center with the determined telephone number being supplied as the calling party number. Performing a lookup operation using the supplied telephone number the emergency service operator determines the location from which the call was placed.

Abstract: Methods and apparatus for wiretapping IP telephone calls are described. At the time an IP telephone registers its current IP address and telephone number with a soft switch responsible for routing calls to the IP telephony device a list of telephone numbers to be monitored is checked. If the number being registered is to be monitored, information identifying the edge router through which the IP telephony device connects to the IP network is obtained. The edge router is then sent a monitor message with the IP address corresponding to the telephone number to be monitored. IP packets including the specified IP address are then forwarded by the identified edge router to a monitoring station. Packet forwarding may involve packet duplication with the original packets being allowed to continue on to their original destination and the duplicated packets being forwarded or, alternatively, a simple packet redirection operation.

Abstract: Methods and apparatus for providing location and other customer information corresponding to an IP addresses, including dynamically assigned IP address, are described. A port of an edge router is assigned to serve as a customer's point of access to an IP based network. Customer information including the location of the customer premises from which the IP network is accessed through the assigned edge router port is stored in a database associating edge router and port information with customer information. When information about a customer using an IP address is desired a database associating IP addresses with edge routers, e.g., edge which acted as proxies to facilitate IP address leasing is consulted. The edge router corresponding to the IP address of interest is then contacted to determine the port number associated with the IP address. Recovered edge router and port number information is then used to access the customer information database.

Abstract: There is provided a protocol separator having a processor with an input port and output ports, and data links connected to the input port and to the output ports, with the data link to the input port carrying packetized data including packets of different protocols, the data link to one of the output ports carrying packets of a first protocol removed from the stream by the processor, and with the data link connected to the other output port carrying the remainder of the packets which were delivered to the input port. The protocol separator operates by determining at least part of a byte in the selected protocol packets which characterizes that protocol, monitoring the stream to detect the occurrence of that part of a byte, and diverting packets containing the part of a byte from the stream to one of the outputs. The remainder of the stream is fed to the second output.

Abstract: Offering vertical services to subscribers and service providers is an avenue to immediately improve the competitiveness of digital subscriber line access service, for example of the type offered by a local exchange carrier. To deliver high-quality vertical services, however, the underlying ADSL Data Network (ADN) or the like needs to establish Quality of Service (QoS) as a core characteristic and offer an efficient mechanism for insertion of the vertical services. The inventive network architecture introduces QoS into the ADN, in a manner that enables the delivery of sophisticated and demanding IP-based services to subscribers, does not affect existing Internet tiers of service, and is cost-effective in terms of initial costs, build-out, and ongoing operations.

Abstract: A system and method for conducting a voice communication through a hybrid network which includes a packet internetwork, such as the Internet, connected to a circuit switched telephone network. The packet internetwork is connected to the switched telephone network through a static filter device, a packet switch, and a telephone network controlled gateway. A control processor is connected to the packet switch and to the filter device. The filter device generates a real time copy of call set up signaling dialog between the party requesting connection and the gateway which passes through or to the filter device. This duplicate of set up signaling is delivered from the filter device through the packet switch to the control processor. The control processor generates therefrom a filter device control signal which specifies the filter parameters derived from the set-up signaling dialog.

Abstract: Offering vertical services to subscribers and service providers is an avenue to immediately improve the competitiveness of digital subscriber line access service, for example of the type offered by a local exchange carrier. To deliver high-quality vertical services, however, the underlying ADSL Data Network (ADN) or the like needs to establish Quality of Service (QoS) as a core characteristic and offer an efficient mechanism for insertion of the vertical services. The inventive network architecture introduces QoS into the ADN, in a manner that enables the delivery of sophisticated and demanding IP-based services to subscribers, does not affect existing Internet tiers of service, and is cost-effective in terms of initial costs, build-out, and ongoing operations.